Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. France20 Oct 2026US tax preparation businessesThe source does not say how they got in.The Record
Critical1 Jun 2026
Elasticsearch Database (Infostealer Logs)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer compilations
1 Jun 2026
High1 Jun 2026
TrueConf
Technology · Records not stated
Server breach exploited by Head Mare group to trojanize client installers with backdoors
1 Jun 2026
Critical1 Jun 2026
Essex NHS Trust (Synnovis)
Healthcare · 900,000 records
Thousands of patient records stolen in ransomware cyberattack on NHS trust in Essex
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack affecting Essex NHS trust
1 Jun 2026
Critical1 Jun 2026
Elasticsearch (Infostealer Database)
Technology · Records not stated
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials from infostealer logs
1 Jun 2026
High1 Jun 2026
Synnovis NHS Trust
Healthcare · 900,000 records
Ransomware attack stole thousands of NHS patient records from Essex healthcare trust
1 Jun 2026
High1 Jun 2026
Coca-Cola fairlife
Retail · Records not stated
Ransomware attack shut down dairy operations
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records confirmed stolen during ransomware attack disrupting healthcare services
1 Jun 2026
Critical1 Jun 2026
Thousands of patient records stolen in ransomware cyberattack
Healthcare · Records not stated
Thousands of patient records stolen in ransomware cyberattack
1 Jun 2026
High1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records and police/government data leaked on dark web
1 Jun 2026
Critical1 Jun 2026
Synnovis (NHS)
Healthcare · 900,000 records
Thousands of NHS patient records stolen in major ransomware attack affecting healthcare services
1 Jun 2026
Critical1 Jun 2026
Thousands of NHS patient records
Healthcare · 900,000 records
Thousands of NHS patient records confirmed stolen in ransomware attack
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records confirmed stolen during major ransomware attack disrupting healthcare
1 Jun 2026
Medium1 Jun 2026
Ecopetrol
Sector not stated · 3,300 records
Cyberattack exposed data tied to approximately 3,300 user accounts
1 Jun 2026
Critical1 Jun 2026
Synnovis NHS
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware cyberattack
1 Jun 2026
Medium1 Jun 2026
Levi Strauss
Retail · Records not stated
Hackers gained access to three workers' company-issued computers via social engineering
1 Jun 2026
High1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records leaked on dark web; police and government contact details exposed
1 Jun 2026
Critical1 Jun 2026
Synnovis/Essex NHS
Healthcare · 900,000 records
Thousands of patient records stolen in major ransomware cyberattack on NHS trust in Essex, England
1 Jun 2026
Critical1 Jun 2026
Thousands of patient records
Healthcare · Records not stated
Thousands of patient records confirmed stolen in ransomware attack that disrupted healthcare services
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack
1 Jun 2026
Critical1 Jun 2026
Fortinet (FortiBleed campaign)
Technology · Records not stated
73,000+ Fortinet FortiGate firewalls compromised with admin credentials and VPN data exposed
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack disrupting healthcare services
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (unnamed user)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials in one of largest infostealer compilations
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack
1 Jun 2026
Were you affected?